portmind.memoryModule 51Inspect what an agent remembers and take a signed, Merkle-rooted snapshot of its memory, with a versioned, workspace-scoped store.
portmind.memory reads and writes an agent-scoped memory store, and snapshot roots its entries in a Merkle tree and signs the root as a memory-attestation with the region's ledger-bundle key. The gateway reaches the store through a service binding in every region.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuseThe gateway forwards /api/v1/portmind/* to the Portmind runtime in each region. Memory is scoped to the calling workspace and stored in that region's workspace database.
Plane module
agentRefkeyentryentries/docs/portmind-memoryAPI referenceRoutes, bodies and status codes./docs/portmind-memoryOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/memoryStart freeCreate a workspace and admit your first intent./auth/signup
versionmerkleRootsnapshot computes over the agent's current memory at that moment.POST /api/v1/portmind/memory upserts one entry for an agentRef and a key, versioning it on conflict rather than overwriting silently.
GET /api/v1/portmind/memory/<key> with agentRef returns that one entry as entry, or a tombstoned result if it was deleted.
GET /api/v1/portmind/memory with agentRef and an optional limit returns every live entry for that agent as entries.
POST /api/v1/portmind/snapshot builds a Merkle root over the sorted {key, contentSha256} leaves of an agent's current memory and returns it as a signed memory-attestation.
This module's calls change real state or reach outside services, so the shared demo does not run them. Sign in to run it in your own workspace. portmind.memory docs
This module's calls change real state or reach outside services, so the shared demo does not run them. Sign in to run it in your own workspace.
A request in the shape the API accepts, and an example response in the shape the module returns.
GET /api/v1/portmind/memory/billing-agent Authorization: Bearer av_workspace_•••• → 200 { entry: { agentRef, key, value, contentSha256, tags, version, createdAt, updatedAt } } for one key (add ?agentRef=); 404 if no live entry. The no-key list route returns { entries }
{
"entry": {
"key": "billing-agent",
"agentRef": "did:web:acme.example:agent:billing",
"value": "last reconciled through invoice inv_4471",
"version": 3,
"updatedAt": "2026-10-30T08:12:00.000Z"
}
}A signed memory attestation shows exactly what an agent's memory held at that moment, not what it holds now.
An operator removes or updates one key in an agent's memory rather than clearing its whole store, since entries are addressed and versioned individually.
The attestation is signed with the same per-region key as ledger bundles, so intramedial-verify checks it against /.well-known/ledger-bundles-keys.json with no call back to Intramedial.
The memory browser console reads from this exact client with no demo-data fallback, so what it shows is what the store actually holds, nothing staged.
{ entries } as the shape of a single-key read. That read returns entry, singular.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
snapshot answers 503 signing_unavailable and returns nothing unsigned.contentSha256 in the attestation.runtime/portmind is a Cloudflare Worker with its own store, tests and dashboard client, reached only through the gateway's service binding.
Portmind is not part of the /api/v1/acp/* dispatch system and has no coordination.* action id; it is its own standalone Worker, reached only through the gateway binding described above.
The single-key path's URL segment names a memory key, not an agent id; the agent is always given separately as agentRef.
entry; only the no-key list read returns entries.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/portmind/memoryList an agent's live memory entries./api/v1/portmind/memory/:keyRead one memory entry by key./api/v1/portmind/memoryWrite or version one memory entry.This module has no MCP action. Call it over REST from any agent or program.
identity.enroll12Agent identity registryGive each agent its own identity before it acts, so every admitted action traces back to one agent and never to a shared account.worldmodel.graph16World model graphSee every agent, repo, lease and named resource your workspace knows, and how they connect, without drawing the map first.ledger.blame10Ledger, replay and blameTrace every touch to one resource in order, and replay any event to rebuild the receipt that shows it actually happened.civics.records48Public records searchAsk the record what happened to one resource, or read the workspace's events plainly, redacted to what your permission actually allows.ledger-bundles.snapshot49Signed evidence bundlesSeal your workspace's audit chain into a signed bundle an auditor can check offline, against a key published for anyone to read.remediation.blast50Blast map and remediationSee what a declared checkpoint's data touched before you undo anything, then restore against it only once a person confirms it by typed phrase.rehoming.plan52